References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

In the Linux kernel, the following vulnerability has been resolved:

net: sched: act_connmark: initialize struct tc_ife to fix kernel leak

In tcf_connmark_dump(), the variable 'opt' was partially initialized using a
designatied initializer. While the padding bytes are reamined
uninitialized. nla_put() copies the entire structure into a
netlink message, these uninitialized bytes leaked to userspace.

Initialize the structure with memset before assigning its fields
to ensure all members and padding are cleared prior to beign copied.

https://git.kernel.org/stable/c/218b67c8c8246d47a2a7910eae80abe4861fe2b7

https://git.kernel.org/stable/c/25837889ec062f2b7618142cd80253dff3da5343

https://git.kernel.org/stable/c/31e4aa93e2e5b5647fc235b0f6ee329646878f9e

https://git.kernel.org/stable/c/51cb05d4fd632596816ba44e882e84db9fb28a7e

https://git.kernel.org/stable/c/62b656e43eaeae445a39cd8021a4f47065af4389

https://git.kernel.org/stable/c/73cc56c608c209d3d666cc571293b090a471da70